Thread Links Date Links
Thread Prev Thread Next Thread Index Date Prev Date Next Date Index

Re: [2600] questions on PP-A

Hi Lida,

These are not authoritative answers by any means:
  1. I think the easiest way is to disable the USB interface in the "certified configuration". However, if you want to enable the interface and if it is only for memory sticks, I don't think it is a shared medium interface but the user would need to identify and authenticate (by using the operator panel, or somehow via the USB memory itself) before being authorized to print. If the USB interface is enabled and it can be used for other USB devices -- like a USB ethernet or wifi adaptor -- then I don't know.
  2. MFP software should be considered "TSF Protected Data", which means that it can't be altered except by an authorized administrator. Therefore, if you''re going to install or update MFP software over the network (or by any other means), the entity performing the installation/update should be identified and authenticated, which means that you are satisfying the data access SFP. After that, I supposed FPT_TST.1 also applies.
--
Regards,
Brian Smithson
PM, Security Research
PMP, CSM, CISSP, CISA, ISO 27000 PA
Advanced Imaging and Network Technologies
Ricoh Americas Corporation
(408)346-4435


Lida Wang wrote: 
Hello all,

Could any one help me on the following questions? I have been struggling
on this for a long time.

Question 1:
If MFP support direct print via USB memory stick, could anyone help me
to identify all the security function policies that apply to this
feature? From my opinion, "USB memory stick" should be treated as a
user, so user identification is applied. However IEEE 1667 which handles
USB security is not finalized yet, so how to we handle USB
identification? Also do we treat the USB interface that MFP provides as
shared medium interface?

Question 2:
When install application to MFP through network, what are all the
security function policies that we should satisfy? Besides FPT_TST.1, is
there any other function that we should satisfy?

Regards,

Lida Wang

Principal engineer

Kyocera Technology Development.